CVE-2025-34047

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19625 2025-06-26 20:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjytu4jk62p 2025-06-27 21:02:23+00:00| seen|...

CVE-2025-6700

creationtimestamp| type| source ---|---|--- 2025-06-26 15:52:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19611 2025-06-26 20:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjybs6x7k2s...

CVE-2025-52900

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The file access permissions for files uploaded to or created from File Browser are never explicitly set by the application. The same is true for the...

CVE-2025-6706

An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific...

CVE-2025-6675

creationtimestamp| type| source ---|---|--- 2025-06-26 13:50:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19597 2025-06-26 18:40:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjrlscwzp25...

CVE-2025-5366

creationtimestamp| type| source ---|---|--- 2025-06-26 12:53:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19591 2025-06-26 15:24:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjgom7jqn2u...

CVE-2025-52900

creationtimestamp| type| source ---|---|--- 2025-06-26 12:08:14+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-jj2r-455p-5gvf 2025-06-26 14:51:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19606 2025-06-26...

CVE-2025-5338

creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19584 2025-06-26 12:24:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj4mh3jnr2u...

CVE-2025-6703

creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19581 2025-06-26 12:39:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj5hcwruh2r...

CVE-2025-53002

creationtimestamp| type| source ---|---|--- 2025-06-26 06:03:23+00:00| published-proof-of-concept| https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-xj56-p8mm-qmxj 2025-06-26 14:51:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19608 2025-06-26...

CVE-2025-3279

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19574 2025-06-26 05:54:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lsigriehbcg2 2025-06-26...

CVE-2025-5929

creationtimestamp| type| source ---|---|--- 2025-06-26 03:48:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19571 2025-06-26 06:51:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsijyv6bgn2o...

CVE-2025-6546

creationtimestamp| type| source ---|---|--- 2025-06-26 03:48:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19567 2025-06-26 06:46:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsijpwqp7y2a...

CVE-2025-5540

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19551 2025-06-26 08:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsipzt3vcl2q...

CVE-2025-6669 gooaclok819 sublinkX jwt.go hard-coded key

A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file middlewares/jwt.go. The manipulation with the input sublink leads to use of hard-coded cryptographic key . The attack can be initiated remotely. Th...

CVE-2025-6627

creationtimestamp| type| source ---|---|--- 2025-06-25 18:51:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19503 2025-06-25 21:34:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lshkvlhbh62m 2025-06-30 20:26:59+00:00| seen|...

CVE-2025-6619

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19490 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6618 TOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injection

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been classified as critical. Affected is the function SetWLanApcliSettings of the file wps.so. The manipulation of the argument PIN leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-52999

jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly...

CVE-2025-6614

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19489 2025-06-25 17:24:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh4w57zuv2m 2025-06-30 20:26:57+00:00| seen|...